What it means
Emergency accounts should be isolated from routine use, strongly protected, monitored, periodically tested, and governed by an explicit activation and recovery process.
Why it matters
Without a tested emergency path, an identity outage can prevent recovery. Without strict controls, the same path can become an invisible permanent bypass.
Practical focus
- Create a minimal number of emergency identities
- Store activation material securely and separately
- Alert immediately on any use and review every action
Common mistakes
- Using emergency accounts for convenience
- Depending on the same identity provider the account is meant to bypass
- Never testing recovery of the credentials
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: